PT-2026-24798 · Labredescefetrj+2 · Wegia

Hunterxsirago1 · Publicado 2026-03-11 · Atualizado 2026-03-11 · CVE-2026-31896

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.6.6

Description WeGIA is a web manager for charitable institutions. A critical SQL injection issue exists in the application prior to version 3.6.6. The remover produto ocultar.php script utilizes extract($ REQUEST) to populate local variables, which are then directly concatenated into a SQL query executed through PDO::query. This allows an authenticated or auth-bypassed attacker to execute arbitrary SQL commands. This can lead to the exfiltration of sensitive data from the database or a time-based denial of service. The vulnerable code directly concatenates user-supplied input from the $ REQUEST variable into a SQL query without proper sanitization. The extract() function is used to populate local variables directly from the $ REQUEST array, making the application susceptible to SQL injection attacks.

Recommendations Versions prior to 3.6.6 should be updated to version 3.6.6 or later.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-31896

GHSA-W7G3-87CR-8M83

Produtos afetados

Wegia

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31896.json · Exploit
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-w7g3-87cr-8m83 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-31896 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2031867683348664688 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2031832972102410618 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2031813396706828620 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-31896 · Nota de Segurança